$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft File: DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft (raw, json) Hash identifier: 2NkIoyH0OFPK5LQfHEcVabpvXw2O/C4pkVBbApiZL+8= Subject key identifier: A8:67:89:53:BB:5E:B2:F7:DA:8E:28:FE:F0:38:0E:50:DE:6E:96:2B Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF Certificate issuer: /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft Manifest number: B1 Signing time: Mon 27 Jul 2026 09:26:52 +0000 Manifest this update: Mon 27 Jul 2026 09:26:52 +0000 Manifest next update: Mon 03 Aug 2026 09:26:52 +0000 Files and hashes: 1: DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl (hash: 60TNxngHNkakok5TYoEJwRT10Fd3O0xEjT+aXAohVMo=) 2: 8EAC217CCA5611F089E70D44C4F9AE02.roa (hash: XXxBCtuO8EG8rucnL16es476f6BaiYAikV+U/4E8csQ=) 3: ABF8D808CA6D11F084F59728C4F9AE02.roa (hash: CpehDruHAKWYlilkVXEQKfS5FGCQ1Hj+67P+aQNX0UE=) 4: 08B79AD09C4111F0A9483031C4F9AE02.roa (hash: ubB2L+A+WYJ8AjqCrJi8J5YRaDtXq+7jruwojcEkTbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Validity Not Before: Jul 27 09:26:52 2026 GMT Not After : Aug 3 09:26:52 2026 GMT Subject: CN=6a67245c-3858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:d1:ce:7f:0f:77:4d:91:9b:05:36:a6:56: 90:b4:1a:2c:c0:38:28:f2:fc:47:37:a4:8c:8b:da: 54:2c:6e:a4:73:f3:1c:77:33:87:b4:72:e5:6e:7d: 7f:15:b3:b3:eb:1a:03:95:3d:7c:3f:fc:8f:6f:ff: 26:58:59:28:63:df:07:47:7d:a1:bb:f4:a8:1b:38: 92:40:01:3b:8c:b6:c5:9e:35:6d:0f:da:5f:83:4d: d9:65:05:02:2d:54:73:2f:8a:2f:34:34:12:72:cc: a9:7b:81:ae:be:42:9c:92:c6:5a:0e:1f:78:ee:7f: f0:b3:21:8d:af:3e:9c:f2:64:83:a9:0d:2d:01:35: 67:98:ea:57:63:d0:3c:63:80:98:a2:36:cf:c3:24: ff:26:2b:93:a7:de:2c:50:e9:00:6f:fd:9b:5f:ef: ad:bf:4f:b2:92:65:78:b0:ad:70:e5:94:e8:82:ff: ce:25:3f:69:56:f4:32:cf:4a:de:69:f4:68:48:dd: b1:16:9a:40:8b:ff:34:4d:00:30:c6:4c:f6:fe:59: bf:13:b1:5a:98:b1:16:ca:c3:87:b4:b2:bb:88:ee: 08:09:70:b9:df:32:44:3c:c2:a1:28:a6:5c:2b:9f: 69:82:10:55:c2:73:3d:f8:10:08:13:89:1e:d3:8a: 04:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:67:89:53:BB:5E:B2:F7:DA:8E:28:FE:F0:38:0E:50:DE:6E:96:2B X509v3 Authority Key Identifier: keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:7a:25:2a:f8:bc:aa:49:62:e6:12:3a:bc:47:6c:a2:4c:ab: 1c:98:2d:4d:88:e5:41:2d:68:02:a7:23:51:bc:4b:bc:e3:69: d8:9a:5c:ca:9d:08:e2:51:41:ef:ba:39:18:2e:0a:78:f4:4e: fd:a9:49:27:b2:32:51:a6:4c:81:51:5c:6b:7e:e8:59:3e:d8: 98:d8:db:57:af:06:0a:e4:9d:f2:82:f9:02:56:cb:81:97:c9: 2b:f3:71:b5:26:6b:d1:bc:6d:ee:ca:a4:5b:2f:6a:cf:03:af: 61:33:08:02:71:3b:79:c7:cb:c8:83:34:7b:ef:bb:a5:16:70: 0b:88:3c:4a:c1:ca:dc:f0:fb:7a:a7:52:07:3f:60:e9:42:34: f5:2e:dd:a2:6f:c3:17:cf:8c:99:e1:b2:3c:db:d0:f0:bf:e9: c7:84:5e:69:1d:47:a1:b1:f8:19:0c:bb:ad:10:b5:aa:62:5a: ad:56:0c:4c:88:69:0c:a7:fa:f7:15:13:13:1d:54:18:31:a7: 5d:a3:1c:1b:01:98:a5:f4:09:34:2a:cf:4f:c4:12:db:ec:57: fe:ed:bd:55:5e:ad:33:55:ed:d9:09:5a:17:d9:7c:94:b4:e0: d7:20:70:82:7c:98:43:3b:c1:6a:0d:e4:ea:58:d1:eb:ac:94: f0:ac:ca:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVEMUYxMTAvBgNVBAUTKDBDQUI2OEUwNjkwODNBNDM4OEU4RkM2OTc1OEYwNDU5 NjJGRDAxQUYwHhcNMjYwNzI3MDkyNjUyWhcNMjYwODAzMDkyNjUyWjAYMRYwFAYD VQQDEw02YTY3MjQ1Yy0zODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4LRzn8Pd02RmwU2plaQtBoswDgo8vxHN6SMi9pULG6kc/McdzOHtHLlbn1/ FbOz6xoDlT18P/yPb/8mWFkoY98HR32hu/SoGziSQAE7jLbFnjVtD9pfg03ZZQUC LVRzL4ovNDQScsype4GuvkKcksZaDh947n/wsyGNrz6c8mSDqQ0tATVnmOpXY9A8 Y4CYojbPwyT/JiuTp94sUOkAb/2bX++tv0+ykmV4sK1w5ZTogv/OJT9pVvQyz0re afRoSN2xFppAi/80TQAwxkz2/lm/E7FamLEWysOHtLK7iO4ICXC53zJEPMKhKKZc K59pghBVwnM9+BAIE4ke04oEiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKhniVO7 XrL32o4o/vA4DlDebpYrMB8GA1UdIwQYMBaAFAyraOBpCDpDiOj8aXWPBFli/QGv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUQxRi9BRDIwMjFBNDk3 NzQxMUYwODBCRjFFNjRDNEY5QUUwMi9ES3RvNEdrSU9rT0k2UHhwZFk4RVdXTDlB YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RLdG80R2tJT2tPSTZQeHBkWThFV1dMOUFhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUQxRi9BRDIwMjFBNDk3NzQxMUYwODBCRjFFNjRDNEY5QUUwMi9ES3RvNEdrSU9r T0k2UHhwZFk4RVdXTDlBYTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKHolKvi8qkli5hI6vEdsokyrHJgtTYjlQS1oAqcjUbxLvONp2Jpcyp0I4lFB 77o5GC4KePRO/alJJ7IyUaZMgVFca37oWT7YmNjbV68GCuSd8oL5AlbLgZfJK/Nx tSZr0bxt7sqkWy9qzwOvYTMIAnE7ecfLyIM0e++7pRZwC4g8SsHK3PD7eqdSBz9g 6UI09S7dom/DF8+MmeGyPNvQ8L/px4ReaR1HobH4GQy7rRC1qmJarVYMTIhpDKf6 9xUTEx1UGDGnXaMcGwGYpfQJNCrPT8QS2+xX/u29VV6tM1Xt2QlaF9l8lLTg1yBw gnyYQzvBag3k6ljR66yU8KzKBA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:58:54 2026 by rpki-client